
| email this FAQ to a colleague
Q: What authentication scheme does IIS use when multiple schemes are available? A: According to the HTTP 1.1 spec in section 15.2 it states that when a server supports multiple authentication schemes that the server should return them to the browser in the order of most secure to least secure (ie: NTCR then Basic User Auth) and the browser should choose the first (most secure) one it supports. IE does follow this, as should other browsers. - Brooks Cutter | Articles | | Feb 3, 2005 - ASP.NET Mixed Mode Authentication | | In many web applications it is desirable for both intranet users and external parties to be able to seamlessly log onto the system. The problem this raises is that it is not easy to allow intranet users to log in via Windows integrated authentication while also allowing external parties to log in to the same application using standard forms authentication. This article will show you one way to achieve the best of both worlds when it comes to authentication. [Read This Article] [Top] |
| | | | |
|